InfoPath 2010 does not work in claims authentication mode on SharePoint 2010

Question

Hi everyone,
I created an Infopath 2010 Forms published on a Claims-based authentication site collection. This form has an external datasource plugged on the
_vti_bin/UserProfileService.asmx webservice (within the same site collection). This datasource is queried when the form opens. When I check this form with Infopath designer preview, everything works fine.
But once this forms is published, an error "Error while trying to contact Web Service" occured when opening a new form.
Here ere an extract of the logs:
The following query failed: GetUserProfileByName (User: DOMAIN\username, Form Name: library, IP: , Connection Target: , Request: http://server/_layouts/FormServer.aspx?xsnLocation=http://server/library/forms/template.xsn?DefaultItemOpen=1&Source=http://server/page.aspx, Form ID: urn:schemas-microsoft-com:office:infopath:library:-myXSD-2010-01-12T23-08-28 Type: DataAdapterException, Exception Message: The remote server returned an error: (500) Internal Server Error.
Server was unable to process request. ---> Attempted to perform an unauthorized operation.
The remote server returned an error: (500) Internal Server Error.)
Here is an extract of my IIS log:
2010-11-25 13:45:30 fe80::b9ab:23d9:ff9e:bb23%11 POST /_vti_bin/userprofileservice.asmx - 50000 - fe80::b9ab:23d9:ff9e:bb23%11 InfoPathDA 500 0 0 41
Additionnaly, you have to know :
If we set the web application authentication mode in "Classic mode", everything work fine
As soon as we set "Claim mode authentication", we reproduce the issue and this even if we are using a Windows integrated  account or an external account (SQL Memberships, Claims/AD)
We reproduce this issue in different SharePoint FARM.
It seems that this issue is generic with "Claims mode authentication" and i'm not shure that other forum can help us.
How can I make this WebService works for my form?
Thanks in advance.
Seb Nicot

Answer 1

I am not sure but a Code Solution might work ... I assume InfoPath 2010 is not Claims-Based aware.
I am on SP1 and June 2011 CU but still had no luck
If you only need the current user’s login name, then in the “FormEvents_Loading” event, you can retrieve the current user name with a call to the “Application.User.LoginName” property.  Here is an example:
        public void FormEvents_Loading(object sender, LoadingEventArgs e)
            XPathNavigator codeUserNameXPN = this.CreateNavigator().SelectSingleNode(
                "/my:myFields/my:CodeRetrievedUserName", this.NamespaceManager);
            codeUserNameXPN.SetValue(this.Application.User.LoginName);
OR ----------------
        public void FormEvents_Loading(object sender, LoadingEventArgs e)
            //A place to write the results
            XPathNavigator codeUserNameXPN = this.CreateNavigator().SelectSingleNode(
                "/my:myFields/my:CodeRetrievedUserName", this.NamespaceManager);
            //codeUserNameXPN.SetValue(this.Application.User.LoginName);
            try
                //ThresholdAuthentication is the web service reference to the
                //https://test:24575/_vti_bin/authentication.asmx web service
                GetUserName.ThresholdAuthentication.Authentication authenticationWS =
                    new GetUserName.ThresholdAuthentication.Authentication();
                //Call the web service's Login method and pass the username and password of a site
                //administrator so we have rights to read all user profiles
                authenticationWS.Url = "https://test:24575/_vti_bin/authentication.asmx";
                authenticationWS.CookieContainer = new System.Net.CookieContainer();
                GetUserName.ThresholdAuthentication.LoginResult result = authenticationWS.Login(
                    "Admin", "Pa$$w0rd");
                if (result.ErrorCode == GetUserName.ThresholdAuthentication.LoginErrorCode.NoError)
                    //If we authenticated correctly, then set up a call to the user profile service
                    //ThresholdUserProfileService is the web service reference to the
                    //https://test:24575/_vti_bin/userprofileservice.asmx web service
                    GetUserName.ThresholdUserProfileService.UserProfileService userProfileWS =
                        new GetUserName.ThresholdUserProfileService.UserProfileService();
                    //Pass the authentication cookies we got back from the authentication web service
                    userProfileWS.Url = "https://test:24575/_vti_bin/userprofileservice.asmx";
                    userProfileWS.CookieContainer = authenticationWS.CookieContainer;
                    //Try to find the user profile information of the current
                    GetUserName.ThresholdUserProfileService.PropertyData[] resultData =
                        userProfileWS.GetUserProfileByName(this.Application.User.LoginName);
                    //Enumerate through the properties
                    foreach (GetUserName.ThresholdUserProfileService.PropertyData property in resultData)
                        //Pick out the "AccountName" property and display it
                        if (property.Name == "AccountName")
                            codeUserNameXPN.SetValue(property.Values[0].Value.ToString());
                else
                    //If we failed to authenticate properly, display the reason why
                    codeUserNameXPN.SetValue(result.ErrorCode.ToString());
            catch (System.Exception ex)
                //If an exception occurred, report it.
                codeUserNameXPN.SetValue(ex.Message);
Note that in order for this code to work, you will need to make your form template fully-trusted in the “Security” section of the “Form Options” dialog, and then publish your form template to SharePoint as an Administrator-Approved form
template